@sdd-method/author-cli 0.1.0 → 0.2.0

package/NOTICE

@@ -2,7 +2,7 @@ sdd-cli
 Copyright 2026 Tom Foster
 
 This product includes software developed as part of the SDD method
-distribution (https://github.com/tomfosteruk/sdd-method).
+distribution.
 
 Licensed under the Apache License, Version 2.0 (the "License");
 you may not use this file except in compliance with the License.

package/dist/author-program.js

@@ -26,7 +26,7 @@ import { registerPlan } from "./verbs/plan.js";
 import { registerRender } from "./verbs/render.js";
 import { registerScaffold } from "./verbs/scaffold.js";
 import { registerSnapshot } from "./verbs/snapshot.js";
-const SPEC_URL = "https://github.com/tomfosteruk/sdd-method/blob/main/docs/method/cli/sdd-cli-specification.md";
+const SPEC_URL = "docs/method/cli/sdd-cli-specification.md (in the method distribution)";
 /** The verbs the author adds to verify, as `<verb>` or `<verb> <subcommand>` (M-ADR 0220 §4.2). Asserted by test. */
 export const AUTHOR_ONLY_SURFACE = [
     "scaffold domain",

package/dist/lib/catalogue/build.js

@@ -1158,7 +1158,7 @@ async function collectRows(schema, manifest, findings, sddPath, snapshotStore) {
     out.set("repo_dependency", await buildRepoDependencies({ sddPath, configs: reposResult.configs, knownRepoIds: knownRepoIdsFinal, findings }));
     // 15. C4 systems + containers + components (L1 + L2 + L3). The L3 walker
     // shipped per `coordination/c4-l3-walker-and-path-convention-coordination.md`
-    // (sdd-method-gov, 2026-05-29) — forward-method authoring path reading
+    // (method governance, 2026-05-29) — forward-method authoring path reading
     // `c4-l3-*.mermaid.md` files alongside the L2 layout. The earlier Path-B
     // deferral assumed reverse-method code-walking; this walker is the
     // forward-method analogue, granularity-agnostic (per-container or

package/dist/lib/catalogue/builders/c4-components.js

@@ -6,7 +6,7 @@
 //
 // Mirrors c4-containers.ts at one level down. Source convention per
 // `coordination/c4-l3-walker-and-path-convention-coordination.md`
-// (sdd-method-gov, 2026-05-29). The walker is granularity-agnostic — both
+// (method governance, 2026-05-29). The walker is granularity-agnostic — both
 // per-container files (one `Container_Boundary` block per file) and
 // per-domain rollup files (multiple `Container_Boundary` blocks per file)
 // produce identical row output. Adopters pick the file shape that suits

package/dist/lib/catalogue/builders/c4-containers.js

@@ -219,7 +219,7 @@ function slugify(s) {
 }
 /**
  * F21: two technology strings flatly contradict when both are present and
- * share no token — ".NET 6 (in Linton)" vs "Java" needs no NLP. Absent or
+ * share no token — ".NET 6 (in Kestrel)" vs "Java" needs no NLP. Absent or
  * overlapping strings are NOT a contradiction (silence, not a guess).
  */
 export function techContradicts(a, b) {

package/dist/lib/catalogue/builders/c4-l1-candidates.js

@@ -20,7 +20,7 @@
 // personas instead of the sibling's. c4-external-systems UNIONS every
 // existing L1 file rather than picking one, so candidate order is irrelevant
 // there; it shares these paths only to avoid a divergent copy.
-// See sdd-method-gov/coordination/persona-c4system-l1-priority-bug-coordination.md.
+// See the method's coordination record persona-c4system-l1-priority-bug.
 import { readdir, stat } from "node:fs/promises";
 import { join } from "node:path";
 /** Own-L1 candidates usable by ANY SDD, in priority order. */

package/dist/lib/catalogue/builders/container-dependency.js

@@ -121,7 +121,7 @@ export async function buildContainerDependency(inputs) {
  * SAME referent and fired. The predicate was inverted on the two
  * name-shapes the estate actually uses.
  *
- * The independent channel is the technology string: ".NET 6 (in Linton)"
+ * The independent channel is the technology string: ".NET 6 (in Kestrel)"
  * against "Java" is a flat contradiction and needs no NLP. A dual-use
  * entry-id (Container + System_Ext in one SDD) whose technologies
  * contradict draws the finding REGARDLESS of what the names say — name

package/dist/lib/catalogue/builders/data-store-mapping.js

@@ -71,7 +71,7 @@ export function collectTableLines(lines, startIdx) {
     return null;
 }
 // ADR 0164: map a Data Store Mapping `Store` cell (a physical engine such as
-// "MySQL (fleet-db)", "MongoDB", "DynamoDB", "Kinesis") to the canonical
+// "MySQL (orders-db)", "MongoDB", "DynamoDB", "Kinesis") to the canonical
 // `entities.persistence_kind` classification. This mirrors the services
 // builder's deriveLanguage (a normalised token derived from a raw cell) —
 // faithful classification, not a verbatim engine. The raw engine string is

package/dist/lib/catalogue/builders/screen-tree.js

@@ -35,7 +35,7 @@ const STRING_RE = /"[^"]*"|'[^']*'/g;
  * line-structure-preserving) so call-head lexing can never fire on quoted
  * content — `Table("Odometer (km)")` must not mint a phantom `Odometer`
  * component, and `"total (sum)"` must not false-fire the lowercase-call-head
- * finding (tomfosteruk/sdd-cli#1). Quote characters are kept; newlines inside
+ * finding (sdd-cli issue 1). Quote characters are kept; newlines inside
  * a span survive. The grammar defines no escape sequences (a quote always
  * closes the literal), matching STRING_RE and stripLineComment.
  *

package/dist/lib/catalogue/scores-coverage.js

@@ -171,7 +171,7 @@ export const RUBRIC_ELIGIBILITY = [
         joinColumn: "id",
         refTransform: null,
         eligibilityFilter: null,
-        eligibilityNote: "NO local population, measured rather than assumed. Refs are '<domain>-feature-grounding-<slug>' and the tails are SIBLING SDD SLUGS (app-shell, cold-chain, connect-rapide), not rows in this SDD: 0/15 against products, applications, features and repositories, and 1/15 against capabilities — a coincidence, not a join. A cross-SDD reference the member tier cannot resolve, so its coverage is declared unmeasurable rather than given a transform that would produce plausible wrong numbers.",
+        eligibilityNote: "NO local population, measured rather than assumed. Refs are '<domain>-feature-grounding-<slug>' and the tails are SIBLING SDD SLUGS (app-shell, gift-cards, storefront-express), not rows in this SDD: 0/15 against products, applications, features and repositories, and 1/15 against capabilities — a coincidence, not a join. A cross-SDD reference the member tier cannot resolve, so its coverage is declared unmeasurable rather than given a transform that would produce plausible wrong numbers.",
     },
     {
         rubricId: "reverse-contract-quality",

package/dist/lib/catalogue/service-contract-aliases-loader.js

@@ -27,7 +27,7 @@
  *       # services). Use when the federated SDD lacks a services.csv to
  *       # gate emission and consumes rows would otherwise dangle at the
  *       # aggregator with unresolved service_id.
- *       - postman-tacho
+ *       - postman-stock
  *       - smoke-tests
  *
  *     same_product_inference:

package/dist/lib/lock-file.js

@@ -66,6 +66,8 @@ export function serialiseLockFile(lock) {
         ...(lock.ciRunner !== undefined ? [`ci_runner: "${lock.ciRunner}"`] : []),
         ...(lock.ciWorkflowBlockSha256 !== undefined ? [`ci_workflow_block_sha256: "${lock.ciWorkflowBlockSha256}"`] : []),
         ...(lock.ciModuleSha256 !== undefined ? [`ci_module_sha256: "${lock.ciModuleSha256}"`] : []),
+        ...(lock.cliSource !== undefined ? [`cli_source: ${lock.cliSource}`] : []),
+        ...(lock.cliPackage !== undefined ? [`cli_package: "${lock.cliPackage}"`] : []),
         "bundles:",
     ];
     for (const b of lock.bundles) {
@@ -117,6 +119,8 @@ function parseVersioned(raw) {
     let ciBinding;
     let ciRunner;
     let ciModuleSha256;
+    let cliSource;
+    let cliPackage;
     const bundles = [];
     let inBundles = false;
     let inPaths = false;
@@ -186,6 +190,10 @@ function parseVersioned(raw) {
                     ciRunner = stripQuotes(value);
                 else if (key === "ci_module_sha256")
                     ciModuleSha256 = stripQuotes(value);
+                else if (key === "cli_source")
+                    cliSource = stripQuotes(value);
+                else if (key === "cli_package")
+                    cliPackage = stripQuotes(value);
             }
             continue;
         }
@@ -313,6 +321,8 @@ function parseVersioned(raw) {
         ...(ciRunner !== undefined ? { ciRunner } : {}),
         ...(ciWorkflowBlockSha256 !== undefined ? { ciWorkflowBlockSha256 } : {}),
         ...(ciModuleSha256 !== undefined ? { ciModuleSha256 } : {}),
+        ...(cliSource !== undefined ? { cliSource } : {}),
+        ...(cliPackage !== undefined ? { cliPackage } : {}),
     };
 }
 function migrateV1(raw, legacyBundleName) {

package/dist/lib/snapshot/targets.js

@@ -68,7 +68,7 @@ export function routeFinding(f, artefacts, shared = new Set()) {
     const targets = new Map();
     const paths = [...f.files.added, ...f.files.removed, ...f.files.modified].filter(citable);
     // The key alone, or in export-folder form (`<key>-master@<rev>`): a hyphen may
-    // follow it only as a branch suffix, so `tcu` never matches inside `tcu-collector`.
+    // follow it only as a branch suffix, so `scanner` never matches inside `scanner-collector`.
     const keyRe = new RegExp(`(^|[^A-Za-z0-9_-])${f.member.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}(-(master|main|develop|trunk)@|[^A-Za-z0-9_-]|$)`);
     const cites = (text, p) => shared.has(p) ? text.split("\n").some((line) => line.includes(p) && keyRe.test(line)) : text.includes(p);
     // Folder-qualified — `<key>-<branch>@<rev>/<path>` — names the member AND the file,

package/dist/lib/validate/plan.js

@@ -25,7 +25,7 @@ const TITLES = {
     // CI has no platform checkout, so this step runs the app-only checks; the met gate needs the platform beside it.
     "app-dependencies": "Validate app dependencies (app-only checks; no platform checkout in CI)",
 };
-export function methodValidationPlan(profile) {
+export function methodValidationPlan(profile, opts = {}) {
     const steps = validatorsForProfile(profile)
         .filter((v) => v.optional !== true)
         .map((v) => ({
@@ -38,12 +38,15 @@ export function methodValidationPlan(profile) {
     if (profile === "platform") {
         steps.push({ id: "cascade-completeness", title: "Validate cascade completeness", tool: "bash", args: ["orchestration/scripts/validate-cascade-completeness.sh", "all"], advisory: false }, { id: "architecture-alignment", title: "Validate architecture alignment", tool: "bash", args: ["orchestration/scripts/validate-architecture-alignment.sh"], advisory: false });
     }
+    const gating = opts.catalogueRebuild === true;
     steps.push({
         id: "catalogue-freshness",
-        title: "Check catalogues reproduce from the specs (advisory)",
+        title: gating
+            ? "Check catalogues reproduce from the specs (gating: the pipeline rebuilt them)"
+            : "Check catalogues reproduce from the specs (advisory)",
         tool: "sdd-maintain",
         args: ["catalogue", "build", "--check", "--sdd-path", "."],
-        advisory: true,
+        advisory: !gating,
     });
     return steps;
 }

package/dist/maintain-version.json

@@ -1,4 +1,4 @@
 {
-  "version": "0.2.0",
-  "built_against_sdd_cli": "1.43.0"
+  "version": "0.3.0",
+  "built_against_sdd_cli": "1.44.0"
 }

package/dist/verbs/plan.js

@@ -5,7 +5,7 @@ export function registerPlan(program) {
         .command("plan")
         .description("Scaffold a plan markdown file from a method-distributed template. Currently supports --pilot for pilot-kickoff plans; future subcommands may add --initiative / --migration.")
         .option("--pilot", "scaffold a pilot-kickoff plan (requires --service, --capability, --domain)", false)
-        .option("--service <name>", "service / pilot name, e.g. party-management")
+        .option("--service <name>", "service / pilot name, e.g. customer-management")
         .option("--capability <name>", "capability under test, e.g. organization-management")
         .option("--domain <name>", "domain the capability belongs to, e.g. party")
         .option("--workspace-root <path>", "SDD root (defaults to cwd)", resolvePathOption)

package/dist/verbs/validate.js

@@ -14,7 +14,12 @@ export function registerValidate(program) {
         .option("--strict", "treat warnings as failures")
         .option("--list", "print the method-managed validation job for this repo's profile as JSON (the plan every CI executor runs, the Dagger module included) and run nothing")
         .option("--profile <profile>", "with --list: the profile to list, instead of reading .sdd-repo-kind (platform | application | integration)")
+        .option("--catalogue-rebuild", "with --list: the pipeline rebuilt the catalogues on this run (M-ADR 0220 §4.4), so the catalogue freshness step gates instead of advising")
         .action(async (opts) => {
+        if (opts.catalogueRebuild === true && opts.list !== true) {
+            process.stderr.write("--catalogue-rebuild only applies with --list\n");
+            process.exit(2);
+        }
         if (opts.list === true) {
             let profile;
             if (opts.profile !== undefined) {
@@ -32,7 +37,7 @@ export function registerValidate(program) {
                 }
                 profile = profileFromRepoKind(kind);
             }
-            process.stdout.write(JSON.stringify({ profile, steps: methodValidationPlan(profile) }, null, 2) + "\n");
+            process.stdout.write(JSON.stringify({ profile, steps: methodValidationPlan(profile, { catalogueRebuild: opts.catalogueRebuild === true }) }, null, 2) + "\n");
             return;
         }
         const { exitCode } = await runValidate({

package/dist/verify-program.js

@@ -29,7 +29,7 @@ import { registerCatalogueBaselineCheck, registerCatalogueImpact, registerCatalo
 import { registerList } from "./verbs/list.js";
 import { registerPackValidate } from "./verbs/pack-validate.js";
 import { registerValidate } from "./verbs/validate.js";
-const SPEC_URL = "https://github.com/tomfosteruk/sdd-method/blob/main/docs/method/cli/sdd-cli-specification.md";
+const SPEC_URL = "docs/method/cli/sdd-cli-specification.md (in the method distribution)";
 /** The full surface, as `<verb>` or `<verb> <subcommand>`. Asserted by test. */
 export const VERIFY_SURFACE = [
     "validate",

package/dist/verify-version.json

@@ -1,4 +1,4 @@
 {
-  "version": "1.2.0",
-  "built_against_sdd_cli": "1.43.0"
+  "version": "1.3.0",
+  "built_against_sdd_cli": "1.44.0"
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@sdd-method/author-cli",
-  "version": "0.1.0",
-  "sddCliVersion": "1.43.0",
+  "version": "0.2.0",
+  "sddCliVersion": "1.44.0",
   "description": "Re-author one SDD's content — scaffold, plan, contracts, conformance, api-surface, snapshots, briefings, catalogue check — plus every read-only verify verb. Ships only the code those verbs reach; it cannot sync the baseline or rebuild the catalogues. Maintenance is in @sdd-method/maintain-cli, administration in @sdd-method/sdd-cli.",
   "license": "Apache-2.0",
   "type": "module",
@@ -17,10 +17,6 @@
     "zod": "^4.3.6",
     "@duckdb/node-api": "^1.5.5-r.3"
   },
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/tomfosteruk/sdd-cli.git"
-  },
   "publishConfig": {
     "access": "public"
   },